Which term best describes a practice of using publicly available sources like social media, news, and official reports to gather security intelligence?

Which term best describes a practice of using publicly available sources like social media, news, and official reports to gather security intelligence?

• A. OSINT
• B. Dark web
• C. Threat modeling
• D. Red team operations

Answer: (A)

Open-Source Intelligence (OSINT) is the practice of collecting and analyzing information from publicly accessible sources—such as social media, news outlets, and official reports—to inform security decisions. This approach harnesses data that anyone can access to identify emerging threats, trends, and indicators that could impact risk posture. Analysts triangulate multiple sources to validate findings and detect patterns, like new attack campaigns or vulnerabilities being discussed in public forums before they become widespread. This differs from the dark web, which involves parts of the internet not easily accessible to the general public; threat modeling, meanwhile, is a proactive process to identify and prioritize potential threats to a system, not primarily about gathering external intelligence; and red team operations are simulated attacks designed to test defenses rather than ongoing intelligence collection. OSINT is the best fit for describing the practice of gathering security intelligence from publicly available sources.

Open-Source Intelligence (OSINT) is the practice of collecting and analyzing information from publicly accessible sources—such as social media, news outlets, and official reports—to inform security decisions. This approach harnesses data that anyone can access to identify emerging threats, trends, and indicators that could impact risk posture. Analysts triangulate multiple sources to validate findings and detect patterns, like new attack campaigns or vulnerabilities being discussed in public forums before they become widespread. This differs from the dark web, which involves parts of the internet not easily accessible to the general public; threat modeling, meanwhile, is a proactive process to identify and prioritize potential threats to a system, not primarily about gathering external intelligence; and red team operations are simulated attacks designed to test defenses rather than ongoing intelligence collection. OSINT is the best fit for describing the practice of gathering security intelligence from publicly available sources.